Web Application Injection Attacks GCIH Practice Questions (Page 11)

Questions 51–55

1. 51foundation · easy

   What is the best defense against NoSQL injection?

   • AUsing parameterized queries or prepared statements provided by the NoSQL driver.
   • BUsing a web application firewall to block NoSQL requests.
   • CBlacklisting dangerous operators like $gt and $ne.
   • DStoring all user input in a separate collection.
   Reveal Solution Discussion Select an answer first
2. 52application · medium

   A web application parses XML documents submitted by users. An attacker submits the following XML payload: `<?xml version="1.0"?><!DOCTYPE foo [<!ENTITY xxe SYSTEM "file:///etc/passwd">]><foo>&xxe;</foo>`. What is the likely impact?

   • AThe application will return an error message but no data
   • BThe application will execute arbitrary code on the server
   • CThe application will crash due to a malformed XML document
   • DThe application will read the contents of `/etc/passwd` and include it in the parsed output
   Reveal Solution Discussion Select an answer first
4. 53foundation · easy

   What is HTTP header injection (CRLF injection)?

   • AAn attack that injects malicious SQL into a database query.
   • BAn attack that injects malicious XML into a parser.
   • CAn attack that injects malicious commands into the operating system.
   • DAn attack where an attacker injects CRLF characters into HTTP headers to add arbitrary headers or split responses.
   Reveal Solution Discussion Select an answer first
5. 54application · medium

   A C++ application has a buffer overflow vulnerability in a function that copies user input into a fixed-size array without bounds checking. An attacker wants to achieve arbitrary code execution. Which mitigation would be most effective in preventing this?

   • ADisable error messages to prevent information leakage
   • BCompile the application with stack canaries and enable ASLR and DEP
   • CUse a WAF to block requests that contain long input strings
   • DAdd input validation to ensure the input is less than the buffer size
   Reveal Solution Discussion Select an answer first
6. 55foundation · easy

   Which of the following best describes SQL injection?

   • AA denial-of-service attack that floods the database with excessive queries to exhaust resources.
   • BA technique where an attacker inserts malicious SQL code into a query through unsanitized user input, altering the query's intended behavior.
   • CA technique to extract data from a database by exploiting a buffer overflow in the database server.
   • DA method to bypass authentication by sending specially crafted HTTP headers to the web server.
   Reveal Solution Discussion Select an answer first